Reflected XSS Vulnerability in PluginOps Landing Page Builder

CVE-2024-34752

What is CVE-2024-34752?

The vulnerability in PluginOps Landing Page Builder stems from improper neutralization of input during web page generation, leading to a reflected Cross-site Scripting (XSS) flaw. This issue allows attackers to inject malicious scripts into web pages viewed by users. Affected versions, up to and including 1.5.1.8, are susceptible to exploitation, enabling unauthorized access to sensitive user data, session hijacking, or redirection to harmful sites. Users of the Landing Page Builder are strongly advised to implement the necessary updates or mitigations to safeguard against potential exploits.

References